Skip to main content
Glama
rstierli

FortiManager MCP Server

by rstierli

list_device_wtp_profiles

Lists FortiAP (WTP) profiles stored in a managed device's device database, optionally for a specific VDOM, to inspect profile settings with credential fields removed.

Instructions

List FortiAP (WTP) profiles in a device's device DB.

Args: device: Managed device name vdom: VDOM to read (default "root")

Returns: dict with device, vdom, count and profiles (credential fields stripped -- see _WTP_PROFILE_SECRET_FIELDS)

Input Schema

NameRequiredDescriptionDefault
vdomNoroot
deviceYes

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv1.12.0

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It usefully discloses that credential fields are stripped from the returned profiles and sketches the return shape, but it omits permissions, error behavior, and pagination details for a read operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short, front-loaded, and organized into args and returns sections. The reference to an internal constant (_WTP_PROFILE_SECRET_FIELDS) is slightly implementation-specific but does not seriously harm conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter list tool with an output schema, the description covers both arguments and the general return structure. It is nearly complete, with only minor omissions around permissions or error cases that are not essential for a listing operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does: 'device' is explained as the managed device name, and 'vdom' is described as the VDOM to read with a default of 'root'. This adds meaningful context beyond the bare string-typed schema fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: list FortiAP (WTP) profiles in a device's device DB. It is clearly distinguishable from list_device_wtps (lists WTPs) and get_device_wtp_profile (gets a single profile), though it does not explicitly name those alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus alternatives such as list_device_wtps or get_device_wtp_profile. It only states what the tool does and its arguments, leaving selection entirely to the agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools